基于求解预期时间损耗的系统网络弹性评估方法

A Cyber Resilience Evaluation Method by Solving Expected Time Cost

由于人们各行业对数字信息的依赖程度不断加深,系统网络弹性的概念也逐渐得到人们的重视。网络弹性是指系统抵抗、吸收、恢复和适应恶劣情况的能力。当前针对网络安全测试的方法已经有很多,但却缺少如何运用网络安全测试数据评估系统网络弹性的方法,本文提出了一种通过求解网络攻击带来的预期时间损耗来评估系统网络弹性的方法,该方法通过求得系统从安全失效到功能恢复发生的预期时间损耗来判定系统的网络弹性,该方法可以为决策者判断系统网络弹性提供一些依据。

Due to increasing dependencies upon digital information to perform mission-related functions from all walks of life.System Cyber Resilience is gradually attracting people’s attention.System Cyber Resilience is the ability of systems to resist,absorb,and recover from or adapt to an adverse occurrence.At present,there are lots of standard tests for gathering data,but no clear path on how to translate data from these events into estimates for System Cyber Resilience.This paper presents a method for estimating System Cyber Resilience by calculating the Expected Time Loss from cyber-attack,which can be resolved with Mean Time to Security Failure and Mean Time to Restore Functions.This method can be employed in helping decision-makers determine if they are low enough for the system to be considered resilient.